Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
File: v_tlOi9T2WcLP5GEAgnz8seKwbI.mft (raw, json)
Hash identifier: U46jxXnBT/KE55gYFKFDEcnlrcas+HLPsMAz7yxrtfA=
Subject key identifier: A5:F7:7F:A0:DE:0D:7C:59:E9:32:FB:48:6B:85:A2:52:D4:26:DE:BE
Authority key identifier: BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
Certificate issuer: /CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Certificate serial: 019D270497B44072B0CE4A0EE2429DD7C91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: v_tlOi9T2WcLP5GEAgnz8seKwbI.crl (hash: 4jYq+xlNmkvepVGnvqDeYIfHnRMycXw5BsETfnRihDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:97:b4:40:72:b0:ce:4a:0e:e2:42:9d:d7:c9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=a5f77fa0de0d7c59e932fb486b85a252d426debe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:d8:8e:3c:76:fd:72:e0:30:f2:e9:b0:1c:
31:4e:41:a5:ab:07:2c:ce:e7:d8:a2:24:de:28:e7:
13:2d:c5:6a:3c:be:f0:58:e3:10:7e:76:58:69:a3:
c5:c9:01:eb:4d:b9:76:33:52:e7:99:e9:57:b4:0c:
70:06:48:4d:b5:1e:0e:ed:ac:b9:a8:61:1a:97:0e:
90:83:ef:33:b4:54:91:26:1c:57:8d:1c:70:f3:2a:
1c:ac:af:ff:09:92:71:32:bb:63:fb:9b:9a:8c:e9:
ae:dd:cf:ae:e7:54:89:eb:4b:8d:8d:c8:14:8f:76:
3e:0b:44:42:96:0d:db:f0:6f:c1:7b:ee:e5:7e:2d:
6c:c1:16:e7:6b:80:3f:7f:c5:dd:8c:e0:47:1b:53:
79:86:5e:b3:82:6a:b7:b3:b0:19:2b:c1:b8:ec:d4:
0f:2f:cc:06:94:77:c6:0f:f2:5f:9f:99:0f:50:26:
02:77:4b:f2:34:80:d9:b0:2b:67:d0:45:2e:9a:58:
1e:7d:7b:29:ca:5c:65:a8:d6:f0:cb:05:b7:35:98:
06:5c:26:32:15:90:3a:eb:c1:de:02:a6:bb:41:55:
cd:16:b4:6a:6a:82:43:c6:cd:c1:ff:72:6b:e1:f6:
f7:14:f3:a2:4a:70:05:c0:37:1c:55:b7:10:d4:b5:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F7:7F:A0:DE:0D:7C:59:E9:32:FB:48:6B:85:A2:52:D4:26:DE:BE
X509v3 Authority Key Identifier:
keyid:BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b2:e3:bf:ae:db:de:c8:88:d7:88:3b:c5:7e:60:74:0a:44:
ce:c4:49:91:ca:53:ea:8c:75:bd:69:d1:2c:07:4a:73:6f:c1:
3d:d3:c6:84:71:bb:1d:65:e5:a8:7f:95:2f:fb:68:34:bf:cd:
9c:4e:2d:b3:86:45:1c:4b:a9:1f:26:74:bc:75:ed:4f:b4:3d:
0e:e2:dc:5a:b8:9b:c4:2b:2b:83:d0:a9:68:ef:9c:50:9f:c4:
f4:08:b3:de:f0:80:20:11:ce:5b:ea:56:71:17:82:bb:4c:11:
29:eb:8f:7d:a8:16:62:fa:7a:8e:e3:4b:34:d0:a2:3d:58:f0:
94:81:62:b0:14:a0:cd:44:75:b6:cc:49:56:bc:fe:c8:69:ad:
7f:4a:d9:d0:3c:5c:00:09:23:e9:27:17:77:87:ca:54:17:16:
5e:b8:f4:91:2a:df:9f:d2:6d:8f:86:8b:28:08:4c:f0:4e:1a:
9c:21:c8:f1:55:06:e5:b0:9a:cd:42:77:97:52:71:fa:83:d8:
3d:08:bd:e0:09:79:6b:4a:04:3f:d5:24:ba:bd:f1:66:18:31:
bf:63:0b:0d:c3:ce:56:d4:b9:1d:d4:f2:83:cf:37:26:ee:13:
45:c8:5d:73:85:8c:0c:a7:20:0e:3d:57:2f:27:d9:6c:bb:f2:
7f:26:a2:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJe0QHKwzkoO4kKd18keMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZmI2NTNhMmY1M2Q5NjcwYjNmOTE4NDAyMDlmM2YyYzc4
YWMxYjIwHhcNMjYwMzI1MjIwMTQ1WhcNMjYwMzI2MjIwMTQ1WjAzMTEwLwYDVQQD
EyhhNWY3N2ZhMGRlMGQ3YzU5ZTkzMmZiNDg2Yjg1YTI1MmQ0MjZkZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc7Yjjx2/XLgMPLpsBwxTkGlqwcs
zufYoiTeKOcTLcVqPL7wWOMQfnZYaaPFyQHrTbl2M1LnmelXtAxwBkhNtR4O7ay5
qGEalw6Qg+8ztFSRJhxXjRxw8yocrK//CZJxMrtj+5uajOmu3c+u51SJ60uNjcgU
j3Y+C0RClg3b8G/Be+7lfi1swRbna4A/f8XdjOBHG1N5hl6zgmq3s7AZK8G47NQP
L8wGlHfGD/Jfn5kPUCYCd0vyNIDZsCtn0EUumlgefXspylxlqNbwywW3NZgGXCYy
FZA668HeAqa7QVXNFrRqaoJDxs3B/3Jr4fb3FPOiSnAFwDccVbcQ1LUDyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKX3f6DeDXxZ6TL7SGuFolLUJt6+MB8GA1UdIwQY
MBaAFL/7ZTovU9lnCz+RhAIJ8/LHisGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl90bE9pOVQyV2NMUDVHRUFnbno4c2VLd2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMDdlMzAtMTc3ZC00YjNmLWI1NjQt
YmQyZjhjNmQ1NDk5LzEvdl90bE9pOVQyV2NMUDVHRUFnbno4c2VLd2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMDdlMzAtMTc3ZC00YjNmLWI1NjQtYmQyZjhjNmQ1NDk5
LzEvdl90bE9pOVQyV2NMUDVHRUFnbno4c2VLd2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrLjv67b
3siI14g7xX5gdApEzsRJkcpT6ox1vWnRLAdKc2/BPdPGhHG7HWXlqH+VL/toNL/N
nE4ts4ZFHEupHyZ0vHXtT7Q9DuLcWribxCsrg9CpaO+cUJ/E9Aiz3vCAIBHOW+pW
cReCu0wRKeuPfagWYvp6juNLNNCiPVjwlIFisBSgzUR1tsxJVrz+yGmtf0rZ0Dxc
AAkj6ScXd4fKVBcWXrj0kSrfn9Jtj4aLKAhM8E4anCHI8VUG5bCazUJ3l1Jx+oPY
PQi94Al5a0oEP9Ukur3xZhgxv2MLDcPOVtS5HdTyg883Ju4TRchdc4WMDKcgDj1X
LyfZbLvyfyaiWw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:27 2026 by rpki-client